CVE-2018-4834 : A vulnerability has been identified in Desigo PXC00-E.D V4.10 (All versions

A vulnerability has been identified in Desigo PXC00-E.D V4.10 (All versions < V4.10.111), Desigo PXC00-E.D V5.00 (All versions < V5.0.171), Desigo PXC00-E.D V5.10 (All versions < V5.10.69), Desigo PXC00-E.D V6.00 (All versions < V6.0.204), Desigo PXC00/64/128-U V4.10 (All versions < V4.10.111 only with web module), Desigo PXC00/64/128-U V5.00 (All versions < V5.0.171 only with web module), Desigo PXC00/64/128-U V5.10 (All versions < V5.10.69 only with web module), Desigo PXC00/64/128-U V6.00 (All versions < V6.0.204 only with web module), Desigo PXC001-E.D V4.10 (All versions < V4.10.111), Desigo PXC001-E.D V5.00 (All versions < V5.0.171), Desigo PXC001-E.D V5.10 (All versions < V5.10.69), Desigo PXC001-E.D V6.00 (All versions < V6.0.204), Desigo PXC100-E.D V4.10 (All versions < V4.10.111), Desigo PXC100-E.D V5.00 (All versions < V5.0.171), Desigo PXC100-E.D V5.10 (All versions < V5.10.69), Desigo PXC100-E.D V6.00 (All versions < V6.0.204), Desigo PXC12-E.D V4.10 (All versions < V4.10.111), Desigo PXC12-E.D V5.00 (All versions < V5.0.171), Desigo PXC12-E.D V5.10 (All versions < V5.10.69), Desigo PXC12-E.D V6.00 (All versions < V6.0.204), Desigo PXC200-E.D V4.10 (All versions < V4.10.111), Desigo PXC200-E.D V5.00 (All versions < V5.0.171), Desigo PXC200-E.D V5.10 (All versions < V5.10.69), Desigo PXC200-E.D V6.00 (All versions < V6.0.204), Desigo PXC22-E.D V4.10 (All versions < V4.10.111), Desigo PXC22-E.D V5.00 (All versions < V5.0.171), Desigo PXC22-E.D V5.10 (All versions < V5.10.69), Desigo PXC22-E.D V6.00 (All versions < V6.0.204), Desigo PXC22.1-E.D V4.10 (All versions < V4.10.111), Desigo PXC22.1-E.D V5.00 (All versions < V5.0.171), Desigo PXC22.1-E.D V5.10 (All versions < V5.10.69), Desigo PXC22.1-E.D V6.00 (All versions < V6.0.204), Desigo PXC36.1-E.D V4.10 (All versions < V4.10.111), Desigo PXC36.1-E.D V5.00 (All versions < V5.0.171), Desigo PXC36.1-E.D V5.10 (All versions < V5.10.69), Desigo PXC36.1-E.D V6.00 (All versions < V6.0.204), Desigo PXC50-E.D V4.10 (All versions < V4.10.111), Desigo PXC50-E.D V5.00 (All versions < V5.0.171), Desigo PXC50-E.D V5.10 (All versions < V5.10.69), Desigo PXC50-E.D V6.00 (All versions < V6.0.204), Desigo PXM20-E V4.10 (All versions < V4.10.111), Desigo PXM20-E V5.00 (All versions < V5.0.171), Desigo PXM20-E V5.10 (All versions < V5.10.69), Desigo PXM20-E V6.00 (All versions < V6.0.204). A remote attacker with network access to the device could potentially upload a new firmware image to the devices without prior authentication.

Published 2018-01-24 16:29:00

Updated 2023-06-13 09:15:14

Source Siemens AG

View at NVD, CVE.org

Products affected by CVE-2018-4834

Siemens » Pxc12/22/36-e.d Firmware
Versions before (<) 6.00.204
cpe:2.3:o:siemens:pxc12\/22\/36-e.d_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » Pxc12/22/36-e.d » Version: N/A
Siemens » Pxc00/50/100/200-e.d Firmware
Versions before (<) 6.00.204
cpe:2.3:o:siemens:pxc00\/50\/100\/200-e.d_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » Pxc00/50/100/200-e.d » Version: N/A
Siemens » Pxc00/64/128-u Firmware
Versions before (<) 6.00.204
cpe:2.3:o:siemens:pxc00\/64\/128-u_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » Pxc00/64/128-u » Version: N/A
Siemens » Pxc001-e.d Firmware
Versions before (<) 6.00.204
cpe:2.3:o:siemens:pxc001-e.d_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » Pxc001-e.d » Version: N/A
Siemens » Pxm20-e Firmware
Versions before (<) 6.00.204
cpe:2.3:o:siemens:pxm20-e_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » Pxm20-e » Version: N/A

Exploit prediction scoring system (EPSS) score for CVE-2018-4834

EPSS FAQ

0.54%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 77 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2018-4834

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
10.0	HIGH	AV:N/AC:L/Au:N/C:C/I:C/A:C	10.0	10.0	NIST
Access Vector: Network Access Complexity: Low Authentication: None Confidentiality Impact: Complete Integrity Impact: Complete Availability Impact: Complete
9.8	CRITICAL	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	3.9	5.9	NIST
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: High Integrity: High Availability: High
9.8	CRITICAL	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	3.9	5.9	Siemens AG
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: High Integrity: High Availability: High

CWE ids for CVE-2018-4834

CWE-306 Missing Authentication for Critical Function

The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.

Assigned by: productcert@siemens.com (Secondary)
CWE-434 Unrestricted Upload of File with Dangerous Type

The product allows the upload or transfer of dangerous file types that are automatically processed within its environment.

Assigned by: nvd@nist.gov (Primary)

References for CVE-2018-4834

https://cert-portal.siemens.com/productcert/pdf/ssa-824231.pdf

Jump to

Vulnerability Details : CVE-2018-4834

Products affected by CVE-2018-4834

Exploit prediction scoring system (EPSS) score for CVE-2018-4834

CVSS scores for CVE-2018-4834

CWE ids for CVE-2018-4834

References for CVE-2018-4834